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AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior 
versions, and listings of claims in the application: 

LISTING OF CLAIMS : 

1-15 (cancelled) 

16. (currently amended) A traceable Traceable method 
for encrypting and/or decrypting data broadcast by at least one 
transmitter towards several decoders, this method enabling the 
identification of a traitor, amongst different lawful users of 
the decoders, who has communicated secret data to a non- 
authorized third party so that this third party is able to 
encrypt and/or decrypt data broadcast by the transmitter, 

in which: 

- during encryption of the broadcast data, the 
transmitter applies at least a first secret cryptographic 
function, and 

- during decryption of said broadcast data, all the 
decoders apply at least one same second secret cryptographic 
function identical to said first function or its inverse, each 
decoder having recourse for this purpose to a mathematical 
description of said second function recorded in a memory, 

wherein during the application of the second function 
the mathematical description of this second function, to which 
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each decoder has recourse, is different from one decoder to 
another or from one group of decoders to another so that the 
mathematical description to which recourse is made exclusively 
identifies the particular decoder or group of decoders among all 
the decoders. 

17. (currently amended) The method Method as in claim 
16, wherein the second cryptographic function is able to process 
non-redundant data. 

18. (currently amended) The method Method as in claim 
16, wherein said mathematical description (F K j) recorded in the 
memory of each decoder is formed of several elementary functions 
(Gi,j) which must be composed with each other in a determined 
order to form said second secret function. 

19. (currently amended) The method Method as in claim 
18, wherein each elementary function (G if j) is equal to the 
composite of at least three functions as per one of the following 
equations : 

Gi,j = f ' i, j og CTj (I, OS 
G 2 ,j = f ' 2 , j og oj ( 2 ) ofi, j 



Gr-l,j = f 'r-l,j Og oj (r _i) Of r _ 2 ,j 

G r , 3 = t og oj (r) of r _i fj 
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in which: 

- G i( j is the -th elementary function of decoder j, j 
being the index identifying a decoder or group of decoders, 

- functions fj^j and f ' i,j are predefined functions 
able to render the elementary functions Gi,j non-commutative 
between each other, 

- CTj is a permutation of all indices {1; r}unique to 
each decoder or group of decoders, 

- g 0 j (t ) is the CTj(t) -th function of a predefined whole 
formed of r non-linear predefined functions gi commutative 
between each other, and 

- S and T are predefined functions able to render 
difficult the cryptanalysis of elementary functions G lr j and G r ,j 
respectively, 

20. (currently amended) The method Method as in claim 

-1 

19, wherein each function f ' -m is equal to the inverse f of 

ij 

function f±,j. 

21. (currently amended) The method Method as in claim 
19, wherein the functions f i; j are linear functions of a set (L n ) 
of the tuples of elements of a finished body (L) on itself. 
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22. (currently amended) The method Method as in claim 
19, wherein the functions S and T are invertible. 

23. (currently amended) The method Method as in claim 
19, wherein the functions S and T are linear functions of a set 
(L n ) of the tuples of elements of a finished body (L) towards 
itself. 

24. (currently amended) The method Method as in claim 
19, wherein the functions gi are chosen so that each elementary 
function G if j corresponds to an encryption block of a 
multivariate encryption algorithm. 

25. (currently amended) The method Method as in claim 
19, wherein each function g ± is of the form g ± (a) = a ei in which a 
is an element of an L' extension of degree n of a basic body L 
with q elements, and e ± is a predefined exponent. 

26. (currently amended) The method Method as in claim 
25, wherein the exponent ei is of the form : 

l+ q 91 + ...[[ +g 91 ]] + q 61 + ... +<? 0d " 1 , in which the exponents 
d± are predefined integers. 
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27. (currently amended) A computer-readable Data 
recording medium with a computer program recorded thereon , 
wherein — i ^the computer program comprises instructions for the 
execution of a traceable encryption and/or decryption method 
according to claim 16, when these instructions are executed by a 
decoder . 

28. (currently amended) A computer readable Data 
recording medium with a computer program recorded thereon , 
wherein it the computer program comprises instructions for the 
execution of a traceable data encryption and/or decryption method 
as in claim 16, when said instructions are executed by a 
transmitter . 

29. (currently amended) A traceable Traceable system 
for encrypting and/or decrypting broadcast data capable of 
identifying a traitor, among different lawful users, who has 
communicated secret data to a non-authorized third party so that 
this third party is able to encrypt and/or decrypt the broadcast 
data, this system comprising: 

- a transmitter able to encrypt broadcast data, this 
transmitter being capable of applying at least a first secret 
cryptographic function, to directly process a message, then of 
broadcasting the message, 

- several decoders able to decrypt broadcast data, all 
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the decoders being able to apply a second secret cryptographic 
function identical to said first function or to its inverse for 
the direct processing of said broadcast message, each decoder for 
this purpose being equipped with a memory in which a mathematical 
description of said second function is recorded; 

wherein the memory of each decoder contains a 
mathematical description of said second function different from 
the one recorded in the memory of the other decoders or in the 
memory of the other groups of decoders so that this mathematical 
description exclusively identifies the particular decoder or 
group of decoders among all the decoders. 

30. (currently amended) The memory Memory intended to 
be associated with a decoder of a traceable data encryption 
and/or decryption system according to claim 28, wherein it 
comprises a mathematical description equivalent to said second 
secret function able to be used by the decoder, this mathematical 
description consisting of several elementary functions (G if j) 
each of which is equal to the composite of at least three 
functions as per one of the following equations: 

Gi,j = f ' i, j og oj (i) OS 

G 2 ,j = f ' 2 , j og CTj ( 2 ) ofi, j 

G r -l,j = f 'r-l,j Og oj (r _i) Of r _ 2 ,j 

G r , 3 = t og oj (r) of r _i fj 
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in which: 

- G i( j is the -th elementary function of decoder j, j 
being the index identifying a decoder or group of decoders, 

- functions fj^j and f ' i,j are predefined functions 
able to render the elementary functions Gi,j non-commutative 
between each other, 

- CTj is a permutation of all indices {1; r}unique to 
each decoder or group of decoders, 

- g 0 j (t ) is the CTj(t) -th function of a predefined whole 
formed of r non-linear predefined functions gi commutative 
between each other, and 

- S and T are predefined functions able to render 
difficult the cryptanalysis of elementary functions G if j and G r ,j 
respectively . 

31. (currently amended) A computer readable Data 
recording medium with a computer program recorded thereon , 
wherein — i ^the computer program comprises instructions for the 
execution of a traceable data encryption and/or decryption method 
as in claim 17, when said instructions are executed by a 
transmitter . 

32. (currently amended) A computer readable Data 
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recording medium with a computer program recorded thereon , the 
computer program wherein — it — comprises instructions for the 
execution of a traceable data encryption and/or decryption method 
as in claim 18, when said instructions are executed by a 
transmitter . 

33. (currently amended) A computer readable Data 
recording medium with a computer program recorded thereon , the 
computer program wherein — i-fe — comprises instructions for the 
execution of a traceable data encryption and/or decryption method 
as in claim 19, when said instructions are executed by a 
transmitter . 

34. (currently amended) A computer readable Data 
recording medium with a computer program recorded thereon , the 
computer program wherein — ±-fc — comprises instructions for the 
execution of a traceable data encryption and/or decryption method 
as in claim 20, when said instructions are executed by a 
transmitter . 

35. (currently amended) A computer readable Data 
recording medium with a computer program recorded thereon , the 
computer program wherein — it — comprises instructions for the 
execution of a traceable data encryption and/or decryption method 
as in claim 21, when said instructions are executed by a 
transmitter . 
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